A858DE45F56D9BC9 archive

201108161354 jkuyr

explained decrypted manual

A masked GUID list: 8 GUIDs, seed 469. 3DES, key MD5 of the jkscb grid.

Metadata

Post ID
jkuyr
Title
201108161354 → 2011-08-16 13:54 on A858's clock
Posted (UTC)
2011-08-16 20:53:49
Timezone
UTC−7 · title 13:54 against posted 20:53 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F6 filler: GUID list via sidebar-MD5 key chain, seed known
Size
544 hex characters · 272 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(d76fd26bcf1a42aaa23f6ae0923764575b9c25212c9e08c381f50fea694136c1d3757ae984707b78acd660eaa3edcf640b4a15e059a732e887bdf0be404f17826a052e2f8fff4396a7be847bce96f1332caf611d3a835103ad8b6d9e0af04fbc2597d2db6b1a179192adeaec87cc7e95e8e73a0a746083809d57c1db5de01bc65f6d922053797346b88941d7eb07ebfa) = bbb21a107025d1debbd16a38cf94bf5f (MD5 of jkscb's grid)
GUIDs
8
Filler GUID seed
new Random(469).Next(9) ✓ verified
Run
Before the scheduler (pre-automation)
Draw
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
15 · 3
Tags
pre-automation2011GUID list via the sidebar key chainmanualkey: MD5 of jkscb's gridrun: pre-automation

From the post to its content

As posted (encrypted)

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
  • Build the password. Take the hex grid posted 14 minutes earlier in jkscb (hex-encoded ASCII), and remove all whitespace: 288 hex characters, which are themselves 9 masked GUIDs.
  • Derive the key. Key = MD5 of that string = bbb21a107025d1debbd16a38cf94bf5f. The jlcv0 GIF, posted 12 hours later, links to this post (redd.it/jkuyr).
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding.

Decrypted: GUID list

  1 306d4b85-cfc8-6434-9325-4e54c90f50a2
  2 2c96b8f5-44a0-3014-bb82-097b80c6e2e7
  3 3ca35df8-2710-5280-9e96-b1ab5ddafb9f
  4 4a8ea723-0ae3-5877-a79a-87e7390387ae
  5 cd30a70b-000b-8c80-9011-42fb41f579a3
  6 c68c50a8-60c8-3df8-8e21-7c25408a2817
  7 6a4342b0-e396-09ba-ba49-b9fb47be499b
  8 a8e608c8-ac12-684b-b2e2-e75b2a42fa66

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 63558306. Exactly this sequence comes out of new Random(469).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in Before the scheduler: before the scheduled app (Jun 26 2012): sparse single tool runs / hand lists (o5o4o, jbucr, jkuyr), 2011 genuine-v4 lists; no long-lived count stream to fit

Solution summary

Method
3DES-ECB, key = raw sidebar MD5 bbb21a10... (MD5 of jkscb's grid, used directly)
Result
8 masked GUIDs, seed 469
Explanation
Decrypted; list = Random(469).Next(9)
Re-checked
3DES sidebar MD5 -> masked GUIDs